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DETAILED ACTION 

This final office action is prepared in response to the applicant's amendments and 
arguments filed on February 4, 2009 as a reply to the non-final office action mailed on 
November 4, 2008. 

Claims 1-2, 4-13, and 15-16 were previously pending; 

Claims 1, 7 and 13 have been amended; 

Claims 1-2, 4-13, and 15-16 are now pending; 

Claims 1-2, 4, 6-10, 12-13 and 15-16 are rejected; 

Claims 5 and 1 1 are objected; 



Response to Arguments 

Applicant's arguments and amendments filed on February 4, 2009 have been carefully 
considered but deemed unpersuasive in view of the following new grounds of rejection as 
explained herein below, necessitated by Applicant's substantial amendments to the claims which 
significantly affected the scope thereof, and will require further search and consideration. 

Accordingly, THIS ACTION IS MADE FINAL. See MPEP 706.07(a). Applicant is 
reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

1. The rejection of claims 1-2, 4-13 and 15-16 under 35. U.S.CC. 101 is withdrawn in view 
of amendments to the independent claims 1, 7 and 13 to recite 

"a plurality of physical interfaces configured to receive packets to be forwarded." 
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Applicant stated that the added limitation overcomes the 101 rejection because "the 
physical interfaces are physical components of the routing device that are not merely 
implemented in software." 

Examiner's interpretation of Applicant's statement above is that the physical interface 
comprises hardware, making the claimed invention not software per se. The 101 rejection is 
withdrawn based on said interpretation by the Examiner. 

If the Applicant tries to interpret the "physical interface" to comprise anything but 
hardware, the 101 rejection still applies to claims 1, 7 and 13 and the associated dependent 
claims. 

2. Applicant's arguments regarding rejections under 35 U.S.C. 103 focus on limitations 
newly added to the independent claims 1, 7 and 13. 

Examiner notes that the newly added element "at least one client application" is not 
disclosed in the application as originally filed. 

It is also unclear to the Examiner what a client application entails, e.g., whether the client 
application runs in the router manager, the virtual router, the kernel, or another routing device. 

Therefore, Examiner interprets the client application to be a process inside the virtual 

router. 

Claim Rejections - 35 USC § 112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of making 
and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it 
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pertains, or with which it is most nearly connected, to make and use the same and shall set forth the best mode 
contemplated by the inventor of carrying out his invention. 

3. Claims 1, 7 and 13 are rejected under 35 U.S.C. 1 12, first paragraph, as failing to 
comply with the written description requirement. The claim(s) contains subject matter which 
was not described in the specification in such a way as to reasonably convey to one skilled in the 
relevant art that the inventor(s), at the time the application was filed, had possession of the 
claimed invention. 

The newly added element "at least one client application" is not disclosed in the 
application as originally filed. 

It is also unclear to the Examiner what a client application entails, e.g., whether the client 
application runs in the router manager, the virtual router, the kernel, or another routing device. 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claims 1-2, 4, 6-10, 12-13 and 15-16 are rejected under 35 U.S.C. 103(a) as being 
anticipated by IP Infusion ("Virtual Routing for Provider Edge Applications", a white paper by 
IP Infusion, Inc.), in view of Huang et al. ("The ENTRAPID Protocol Development 
Environment", hereinafter "Huang") and Haut et al ("Summary: Advantages of shared 
libraries", hereinafter "Haut"). 
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Regarding claim 1, IP Infusion teaches a routing device (Fig. 4 discloses a virtual router 
system) comprising: 

an operating system kernel (IP Infusion, page 4, section "Virtual Router Design 
Considerations" discloses Vx Works as a possible choice of a real-time operating system); 

a plurality of physical interfaces configured to receive packets to be forwarded (IP 
Infusion, the hardware hosting the virtual routers in Fig. 2 inherently comprises a plurality of 
physical interfaces in order to/from route packets to the Internet); 

a plurality of virtual routers (Fig. 4 discloses a plurality of virtual routers VR1, VR 2 and 
VRn that are situated inside the virtual router system), wherein the plurality of virtual routers 
comprise a plurality of instructions for controlling a data processor to perform one or more tasks, 
the instructions being stored on a computer readable medium, and wherein the plurality of virtual 
routers are external to the operating system kernel, 

wherein each virtual router further comprises: 

a routing protocol stack configured to handle a plurality of routing protocols (IP Infusion, 
Fig. 3 and page 5, section "Virtual router system overview" disclose a virtual router supporting a 
plurality of routing protocols including RIP, OSPF and BGP); 

a plurality of interface drivers configured to communicate with a plurality of 
corresponding physical interfaces (IP Infusion, page 6, column 2, paragraph 2 discloses that 
multiple interfaces can be assigned to a single VR, where it is well known in the art that every 
physical interface inherently corresponds to an interface driver); 

an Internet Protocol (IP) stack configured to interact with the routing protocol 
stack and perform a forwarding function via the plurality of interface drivers (Fig. 3 discloses 
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that the virtual router contains a TCP/IP stack that interacts with routing protocols such as RIP, 
OSPF and BGP on one side, and connects to a forwarding plane to perform forwarding function 
via the physical interfaces on the other side, as is described in page 4, column I, paragraph 2; 
The forwarding plane inherently forwards packets to the physical interfaces via interface 
drivers.), the IP stack having a forwarding information table, information from which is used to 
perform the forwarding function (page 6, column 1, paragraph 3 discloses that the TCP/IP stack 
includes many features of a VR, such as software forwarding and management of the FIBs); 

a router manager configured to manage the plurality of virtual routers (Fig. 4 discloses a 
Global Management Authority (GMA) that creates and manages virtual routers), wherein the 
router manager is configured to couple each virtual router to at least one of the physical 
interfaces (IP Infusion, page 5, column 2, last paragraph and page 6, Fig. 4 disclosed that the 
GMA configures individual routers and its coupling to the physical connections (i.e. physical 
interfaces) through the VR MA); and 

an application, wherein the application is situated external to the plurality of virtual 
routers (The Global Management Authority (GMA) disclosed in Fig. 4 is a software package that 
performs not only router manager functions, but also other system administrative functions such 
as remote login, therefore it is interpreted to anticipate said application recited in the claim.), and 
wherein the application being configured to receive requests to perform a plurality of tasks for at 
least one client application (IP Infusion, page 5, column 2, last paragraph and page 6, Fig. 4, 
where the management authority (MA) at VR level anticipates the at least one client application 
recited in the claim); 
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wherein the application is able to selectively communicate with one or more of 
the plurality of virtual routers on a dynamic basis to have the one or more virtual routers 
perform the plurality of tasks for at least one client application, wherein the application selects a 
virtual router to perform a task based upon a set of routing protocols supported by the virtual 
router and the task to be performed (IP Infusion, page 3, column 1 discloses that GMA is created 
so that global administrators can login to the router system in runtime and then selectively login 
to a chosen VR to execute commands; see page 6, Fig. 4 for more information). 

IP Infusion does not expressly teach but Huang teaches a socket layer having a 
corresponding socket application programming interface, the socket layer configured to facilitate 
interactions between the IP stack and the routing protocol stack and the application, wherein the 
socket application programming interface is used to facilitate communications with the socket 
layer (Huang, page 4, column 1, paragraph 1 discloses that applications built using the BSD 
socket API can be ported immediately to a virtualized network kernel (VNK) which is a user- 
space IP protocol stack. Huang's disclosure implies that VNK supports a BSD socket API.) 

It would have been obvious for one of ordinary skill in the art to apply Huang's teaching 
of socket API to IP Infusion's virtual router system such that a socket layer is included to 
facilitate interactions between the IP stack, the routing protocol stack and the application, as is 
recited in the claim. 

One would have been motivated to combine as such for the reason that sockets have been 
widely used in network programming as an inter-process communication mechanism since its 
introduction in the 1980s. Furthermore, the IP fusion reference states very specifically in the 
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section "Defining Virtual Routing" on page 2 that "a virtual router is an emulation of a physical 
router at the software layer" and "Essentially many instances of router an protocol code may be 
running on a single unit," which disclosure implies that the many instances of router must share 
the same operating system kernel when running on a single unit. IP Infusion, section "Virtual 
routing Requirements" on page 2 further discloses that a VR must contain its own instance of the 
applicable routing protocols and be fully independent from another VR. Such requirements 
imposed by IP fusion on its VR is met by the ENTRAPID model proposed by Huang. Therefore, 
one of ordinary skill would have been motivated to combine them at the time the present 
invention was made. 

Furthermore, IP Infusion does not explicitly teach "wherein the routing protocol stack 
and the IP protocol stack are implemented using dynamic libraries shared among the plurality of 
virtual routers." 

However, Huang teaches using software libraries to implement kernel and process 
virtualization, where a virtualized kernel includes a TCP/IP stack, i.e., the routing protocol stack 
and the IP protocol stack (Huang, page 4, "A. Kernel Virtualization" and page 5, "B. Process 
Virtualization"). 

Meanwhile, Haut teaches the advantages of using shared libraries (i.e., dynamic 
libraries), wherein the advantages include needing only one copy of the dynamic library in the 
memory space at a time even if N tasks are running that use the library, therefore reducing the 
overall memory footprint of the tasks. 
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One would have been motivated to combine Huang and Haut because both teaches 
implementing libraries and tasks in a computer system. 

It would have been obvious for one of ordinary skill in the art to integrate Haut's teaching 
about the advantages of dynamic libraries into Huang's implementation of virtualized kernels and 
processes as such that the virtualized kernels and processes are implemented as dynamic 
libraries. The combination yields the highly predictable and desirable results of reducing the 
memory usage of the many virtualized tasks in Huang, and in turn allowing a computer system to 
support more virtual routers than it would have otherwise been possible had the virtualized tasks 
been implemented as static libraries. 

The combination of Huang and Haut would have also made dynamic libraries an obvious 
choice when IP Infusion is combined with Huang. 

Regarding claim 2, the combination of IP Infusion, Huang and Haut teaches the routing 
device of claim 1 wherein software is used to implement the router manager (Page 5, column 2, 
paragraph 2 discloses that a virtual router comprises a full implementation of a physical router at 
the software level, which includes the router manage such as the "VR management authority" 
disclosed in Fig. 3). 

Regarding claim 4, the combination of IP Infusion, Huang and Haut teaches the routing 
device of claim 3 . 

IP Infusion does not explicitly disclose that the IP stack of each of the plurality of virtual 
routers resides external to the operating system kernel. 
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However, Huang discloses a virtualized networking system that comprises an operating 
system kernel and a plurality of virtualized networking kernels (VNK) and processes residing 
external to the OS kernel (see page 3, column 2). A VNK is the result of extracting the 
networking portion of the FreeBSD protocol from the kernel and moving it into the user space, 
i.e. a VNK is an instance of the user-space IP stack (see page 5, column 1, paragraph 2). Huang 
further discloses that one or more virtualized processes can run on top of a VNK to implement 
networking protocols such routing protocols above the IP layer, as the purpose of ENTRAPID is 
to provide a protocol development environment (see page 4, column 1, paragraph 1 and page 8, 
column 1, section VII). Thus, a VNK and its corresponding virtualized processes together form 
a virtual router. 

Therefore, it would have been obvious for one of ordinary skill in the art to modify IP 
Infusion's virtual router system with Huang's teaching such that the routing device further 
comprises an operating system kernel wherein the IP stack of each of the plurality of virtual 
routers resides external to the operating system kernel. One would have been motivated to 
combine as such for the desirable advantages that (1) the resulted system allows each copy of the 
IP stack to work independently; (2) existing user-space applications can be ported immediately 
to the virtual router (Huang, page 4, column 1), and (3) developers can monitor and modify any 
aspect of the entire protocol stack without having to make any changes to the kernel (Huang, 
page 3, column 2, last paragraph). 

Regarding claim 6, the combination of IP Infusion, Huang and Haut teaches the routing 
device as recited in claim 1 . IP Infusion further teaches an UNIX system incorporating the 
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routing device (page 5, column 1, paragraph 1 discloses that the virtual router system is 
implemented on Linux, which is a UNIX operating system). 

Regarding claim 7, IP Infusion teaches a routing device comprising: 

an operating system kernel (page 5, column 1, paragraph 1 discloses that the virtual 

router is implemented on Linux, Vx Works and OSE, all of which contain an operating system 

kernel); 

a plurality of virtual routers (IP Infusion, Fig. 3 discloses the virtual routers 1 in a virtual 
router system), 

wherein the virtual router includes a routing protocol stack and an IP protocol stack (IP 
Infusion, Fig. 3 and page 5, section "Virtual router system overview" disclose a virtual router 
supporting a plurality of routing protocols including RIP, OSPF and BGP); 

a router manager configured to manage the virtual router (Fig. 4 discloses a Global 
Management Authority (GMA) that creates and manages virtual routers); 

an application residing external to the plurality of virtual router (The Global Management 
Authority (GMA) disclosed in Fig. 4 is a software package that performs not only router 
manager functions, but also other system administrative functions such as remote login, therefore 
it is interpreted to anticipate said application recited in the claim), the application being 
configured to receive requests to perform a plurality of tasks for at least one client application (IP 
Infusion, page 5, column 2, last paragraph and page 6, Fig. 4, where the management authority 
(MA) at VR level anticipates the at least one client application recited in the claim); and 
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a plurality of physical interfaces configured to receive packets to be forwarded (Fig. 5 
and page 3, column 1, paragraph 1 disclose that the routing device includes multiple physical 
interfaces); 

wherein the application is able to selectively interact with the virtual router and the 
operating system kernel on a dynamic basis in order to have the virtual router and the 
operating system kernel perform a plurality of tasks for at least one client application, wherein 
the application selects a virtual router to perform a task based upon a set of routing protocols 
supported by the virtual router and the task to be performed (IP Infusion, page 3, column 1 
discloses that GMA is created so that global administrators can login to the router system in 
runtime and then selectively login to a chosen VR to execute commands; see page 6, Fig. 4 for 
more information). 

IP Infusion does not explicitly teach that the virtual router resides external to the 
operating system kernel. 

However, Huang discloses a virtualizcd networking system that comprises an operating 
system kernel and a plurality of virtualized networking kernels (VNK) and processes residing 
external to the OS kernel (see page 3, column 2). A VNK is the result of extracting the 
networking portion of the FreeBSD protocol from the kernel and moving it into the user space, 
i.e. a VNK is an instance of the user-space IP stack (see page 5, column 1, paragraph 2). Huang 
further discloses that one or more virtualized processes can run on top of a VNK to implement 
networking protocols such routing protocols above the IP layer, as the purpose of ENTRAPID is 
to provide a protocol development environment (see page 4, column 1, paragraph 1 and page 8, 
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column 1, section VII). Thus, a VNK and its corresponding virtualized processes together form 
a virtual router. 

It would have been obvious for one of ordinary skill in the art to modify IP Infusion's 
virtual router system with Huang's teaching so that the routing device further comprises an 
operating system kernel wherein the virtual routers resides external to the operating system 
kernel. One would have been motivated to combine as such for the desirable advantages that (1) 
the resulted system allows each copy of the IP stack to work independently; (2) existing user- 
space applications can be ported immediately to the virtual router (Huang, page 4, column 1), 
and (3) developers can monitor and modify any aspect of the entire protocol stack without 
having to make any changes to the kernel (Huang, page 3, column 2, last paragraph). 

Furthermore, the IP fusion reference states very specifically in the section "Defining 
Virtual Routing" on page 2 that "a virtual router is an emulation of a physical router at the 
software layer" and "Essentially many instances of router an protocol code may be running on a 
single unit," which disclosure implies that the many instances of router must share the same 
operating system kernel when running on a single unit. IP Infusion, section "Virtual routing 
Requirements" on page 2 further discloses that a VR must contain its own instance of the 
applicable routing protocols and be fully independent from another VR. Such requirements 
imposed by IP fusion on its VR is met by the ENTRAPID model proposed by Huang. Therefore, 
one of ordinary skill would have been motivated to combine them at the time the present 
invention was made. 
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IP Infusion does not explicitly teach that the routing protocol stack and the IP protocol 
stack are implemented using dynamic libraries shared among a plurality of virtual routers. 

However, Huang teaches using software libraries to implement kernel and process 
virtualization, where a virtualized kernel includes a TCP/IP stack, i.e., the routing protocol stack 
and the IP protocol stack (Huang, page 4, "A. Kernel Virtualization" and page 5, "B. Process 
Virtualization"). 

Meanwhile, Haut teaches the advantages of using shared libraries (i.e., dynamic 
libraries), wherein the advantages include needing only one copy of the dynamic library in the 
memory space at a time even if N tasks arc running that use the library, therefore reducing the 
overall memory footprint of the tasks. 

One would have been motivated to combine Huang and Haut because both teaches 
implementing libraries and tasks in a computer system. 

It would have been obvious for one of ordinary skill in the art to integrate Haut's teaching 
about the advantages of dynamic libraries into Huang's implementation of virtualized kernels and 
processes as such that the virtualized kernels and processes are implemented as dynamic 
libraries. The combination yields the highly predictable and desirable results of reducing the 
memory usage of the many virtualized tasks in Huang, and in turn allowing a computer system to 
support more virtual routers than it would have otherwise been possible had the virtualized tasks 
been implemented as static libraries. 

The combination of Huang and Haut would have also made dynamic libraries an obvious 
choice when IP Infusion is combined with Huang. 
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Regarding claim 8, the combination of IP Infusion, Huang and Haut teaches the routing 
device of claim 7. IP Infusion further teaches that software is used to implement the virtual 
router and the router manager (Page 5, column 2, paragraph 2 discloses that a virtual router 
comprises a full implementation of a physical router at the software level). 

Regarding claim 9, the combination of IP Infusion, Huang and Haut teaches the routing 
device of claim 7. IP Infusion further teaches that the virtual router includes: 

a routing protocol stack configured to handle a plurality of routing protocols (Fig. 3 
discloses a virtual router supporting a plurality of routing protocols including RIP, OSPF and 
BGP); 

a plurality of interface drivers configured to communicate with corresponding physical 
interfaces (Page 6, column 2, paragraph 2 discloses that multiple interfaces can be assigned to a 
single VR, where it is well known in the art that every physical interface inherently corresponds 
to an interface driver); 

an Internet Protocol (IP) stack configured to interact with the routing protocol 
stack and perform a forwarding function via the plurality of interface drivers (Fig. 3 discloses 
that the virtual router contains a TCP/IP stack that interacts with routing protocols such as RIP, 
OSPF and BGP on one side, and connects to a forwarding plane to perform forwarding function 
via the physical interfaces on the other side, as is described in page 4, column 1, paragraph 2; 
The forwarding plane inherently forwards packets to the physical interfaces via interface 
drivers.), the IP stack having a forwarding information table, information from which is used to 
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perform the forwarding function (page 6, column 1, paragraph 3 discloses that the TCP/IP stack 
includes many features of a VR, such as software forwarding and management of the FIBs); and 

IP Infusion does not teach but Huang teaches a socket layer having a corresponding 
socket application programming interface, the socket layer configured to facilitate interactions 
between the IP stack and the routing protocol stack and the application, wherein the socket 
application programming interface is used to facilitate communications with the socket layer 
(Huang, page 4, column 1, paragraph 1 discloses that applications built using the BSD socket 
API can be ported immediately to a virtualized network kernel (VNK) which is a user-space IP 
protocol stack. Huang's disclosure implies that VNK supports a BSD socket API.) 

It would have been obvious for one of ordinary skill in the art to apply Huang's teaching 
of socket API to IP Infusion's virtual router system such that a socket layer is included to 
facilitate interactions between the IP stack, the routing protocol stack and the application, as is 
recited in the claim. One would have been motivated to combine as such for the reason that 
sockets have been widely used in network programming as an inter-process communication 
mechanism since its introduction in the 1980s. 

Regarding claim 10, the combination of IP Infusion, Huang and Haut teaches the routing 
device of claim 9. 

IP Infusion does not teach that the IP stack of the virtual router resides external to the 
operating system kernel. 

However, as mentioned above in claim 7, Huang discloses a virtualized networking 
system that comprises an operating system kernel and a plurality of virtual routers residing 
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external to the OS kernel (see page 3, column 2). Each virtual router comprises one VNK and a 
plurality of corresponding virtualized processes, where the VNK is a user-space IP stack. 

It would have been obvious for one of ordinary skill in the art to modify IP Infusion's 
virtual router system with Huang's teaching such that the IP stack of the virtual router resides 
external to the operating system kernel. One would have been motivated to combine as such for 
the desirable advantages that (1) the resulted system allows each copy of the IP stack to work 
independently; 2) existing user-space applications can be ported immediately to the virtual router 
(Huang, page 4, column 1), and (3) developers can monitor and modify any aspect of the entire 
protocol stack without having to make any changes to the kernel (Huang, page 3, column 2, last 
paragraph). 

Regarding claim 12, the combination of IP Infusion, Huang and Haut teaches the routing 
device as recited in claim 7. IP Infusion further teaches an UNIX system incorporating the 
routing device (page 5, column 1, paragraph 1 discloses that the virtual router system is 
implemented on Linux, which is a UNIX operating system). 

Regarding claim 13, IP Infusion teaches a routing device comprising 

a plurality of virtual routers (Fig. 4 discloses a plurality of virtual routers VR1, VR 2 and 

VRn that are situated inside the virtual router system), 

a plurality of physical interfaces configured to receive packets to be forwarded (Fig. 5 

and page 3, column 1, paragraph 1 disclose that the routing device includes multiple physical 

interfaces); 
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wherein each virtual router includes a routing protocol stack (IP Infusion, Fig. 3 and page 
5, section "Virtual router system overview" disclose a virtual router supporting a plurality of 
routing protocols including RIP, OSPF and BGP) and 

an application residing external to the plurality of virtual routers (The Global 
Management Authority (GMA) disclosed in Fig. 4 is also an application situated external to the 
plurality of virtual routers; As the instant invention does not disclose the functions of said 
application, IP Infusion's GMA is interpreted to anticipate said application recited in the claim); 

wherein the application is able to selectively interact with one of the plurality 
of virtual routers (Page 3, column 1 discloses that GMA is created so that global administrators 
can login to the router system in runtime and then selectively login to a chosen VR to execute 
commands). 

wherein the application is configured to receive requests to perform a plurality of tasks 
for at least one client application (IP Infusion, page 5, column 2, last paragraph and page 6, Fig. 
4, where the management authority (MA) at VR level anticipates the at least one client 
application recited in the claim); 

wherein the application is able to selectively communicate with one or more of 
the plurality of virtual routers on a dynamic basis to have the one or more virtual routers 
perform a plurality of tasks for at least one client application, wherein the application selects a 
virtual router to perform a task based upon a set of routing protocols supported by the virtual 
router and the task to be performed (IP Infusion, page 3, column 1 discloses that GMA is created 
so that global administrators can login to the router system in runtime and then selectively login 
to a chosen VR to execute commands; see page 6, Fig. 4 for more information). 
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IP Infusion does not explicitly disclose that each virtual router has an associated socket 
layer and an Internet Protocol (IP) stack, wherein the associated socket layer has a corresponding 
socket application programming interface configured to facilitate communications with the 
associated socket layer, and the associated socket layer is configured to facilitate interactions 
between the IP stack and the application 

However, Huang discloses in page 4, column 1, paragraph 1 that applications built using 
the BSD socket API can be ported immediately to a virtualized network kernel (VNK) which is a 
user-space IP stack. Huang's disclosure implies that the VNK supports a BSD socket API, 
through which user space applications can communicate with the socket layer and the IP stack. 

It would have been obvious for one of ordinary skill in the art to apply Huang's teaching 
of socket API to IP Infusion's virtual router system such that a socket layer and API is included 
to facilitate interactions between the IP stack and the application, as is recited in the claim. One 
would have been motivated to combine as such because sockets have been widely used in 
network programming as an inter-process communication mechanism since its introduction in 
the 1980s. 

Furthermore, the IP fusion reference states very specifically in the section "Defining 
Virtual Routing" on page 2 that "a virtual router is an emulation of a physical router at the 
software layer" and "Essentially many instances of router an protocol code may be running on a 
single unit," which disclosure implies that the many instances of router must share the same 
operating system kernel when running on a single unit. IP Infusion, section "Virtual routing 
Requirements" on page 2 further discloses that a VR must contain its own instance of the 
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applicable routing protocols and be fully independent from another VR. Such requirements 
imposed by IP fusion on its VR is met by the ENTRAPID model proposed by Huang. Therefore, 
one of ordinary skill would have been motivated to combine them at the time the present 
invention was made. 

IP Infusion does not explicitly teach that the routing protocol stack and the IP protocol 
stack are implemented using dynamic libraries shared among a plurality of virtual routers. 

However, Huang teaches using software libraries to implement kernel and process 
virtualization, where a virtualized kernel includes a TCP/IP stack, i.e., the routing protocol stack 
and the IP protocol stack (Huang, page 4, "A. Kernel Virtualization" and page 5, "B. Process 
Virtualization"). 

Meanwhile, Haut teaches the advantages of using shared libraries (i.e., dynamic 
libraries), wherein the advantages include needing only one copy of the dynamic library in the 
memory space at a time even if N tasks are running that use the library, therefore reducing the 
overall memory footprint of the tasks. 

One would have been motivated to combine Huang and Haut because both teaches 
implementing libraries and tasks in a computer system. 

It would have been obvious for one of ordinary skill in the art to integrate Haut's teaching 
about the advantages of dynamic libraries into Huang's implementation of virtualized kernels and 
processes as such that the virtualized kernels and processes are implemented as dynamic 
libraries. The combination yields the highly predictable and desirable results of reducing the 
memory usage of the many virtualized tasks in Huang, and in turn allowing a computer system to 
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support more virtual routers than it would have otherwise been possible had the virtualized tasks 
been implemented as static libraries. 

The combination of Huang and Haut would have also made dynamic libraries an obvious 
choice when IP Infusion is combined with Huang. 

Regarding claim 15, the combination of IP Infusion, Huang and Haut teaches the routing 
device of claim 13. 

IP Infusion does not teach that the plurality of virtual routers reside external to the 
operating system kernel. 

However, Huang discloses in page 3, column 2 a virtualized networking system that 
comprises an operating system kernel, and a plurality of virtualized networking kernels (VNK) 
and virtualized processes that reside external to the OS kernel. As is further disclosed in page 5, 
column 1, paragraph 2, a VNK is the result of extracting the networking portion of the FreeBSD 
protocol from the kernel and moving it into the user space, therefore, a VNK is an instance of the 
user-space IP stack. 

Huang further discloses that one or more virtualized processes can run on top of a VNK 
to implement networking protocols such routing protocols above the IP layer (see page 4, 
column 1, paragraph 1 and page 8, column 1, section VII). Thus, a VNK and its corresponding 
virtualized processes together form a virtual router. 

It would have been obvious for one of ordinary skill in the art to modify IP Infusion's 
virtual router system with Huang's teaching such that the IP stack of the virtual router resides 
external to the operating system kernel. One would have been motivated to combine as such for 
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the desirable advantages that (1) the resulted system allows each copy of the IP stack to work 
independently; (2) existing user-space applications can be ported immediately to the virtual 
router (Huang, page 4, column 1), and (3) developers can monitor and modify any aspect of the 
entire protocol stack without having to make any changes to the kernel (Huang, page 3, column 
2, last paragraph). 

Regarding claim 16, the combination of IP Infusion, Huang and Haut teaches the routing 
device as recited in claim 13. IP Infusion further teaches an UNIX system incorporating the 
routing device (page 5, column 1, paragraph 1 discloses that the virtual router system is 
implemented on Linux, which is a UNIX operating system). 

Allowable Subject Matter 
5. Claims 5 and 11 objected to as being dependent upon a rejected base claim, but would 
be allowable if rewritten in independent form including all of the limitations of the base claim 
and any intervening claims. 

Conclusion 

THIS ACTION IS FINAL. Applicant is reminded of the extension of time policy as set forth in 
37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
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the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 CFR 
1.136(a) will be calculated from the mailing date of the advisory action. In no event, however, 
will the statutory period for reply expire later than SIX MONTHS from the mailing date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to SHIRLEY X. ZHANG whose telephone number is (571)270- 
5012. The examiner can normally be reached on Monday through Friday 8:00am - 5:30pm EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Vaughn can be reached on (571) 272-3922. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Shirley X. Zhang/ 



Application/Control Number: 10/775,732 Page 24 

Art Unit: 2444 

Examiner, Art Unit 2444 
4/8/2009 

/Joseph E. Avellino/ 

Primary Examiner, Art Unit 2446 



